CVE-2021-47308: scsi: libfc: Fix array index out of bound exception
Vulnerability summary
CVE-2021-47308 is a high (CVSS 8.8) Out-of-bounds Read vulnerability in linux. EPSS estimates a 1.19% chance of exploitation in the next 30 days, higher than 67.9% of scored vulnerabilities.
Not severe (CVSS 8.8, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 21-05-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fc_rport_prli_resp().
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.19%
Chance of exploitation in the next 30 days
Percentile
68%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.19% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu88 products
- linuxAll versions (No fix recorded) | < 4.15.0-159.167 | < 5.4.0-88.99
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 4.15.0-1112.119 | < 5.4.0-1057.60
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 386b97b43c0c9e0d878eec7ea1db16af22b036ae, < 44651522941c623e20882b3b443f23f77de1ea8b | ≥ 386b97b43c0c9e0d878eec7ea1db16af22b036ae, < 4921b1618045ffab71b1050bf0014df3313a2289 | ≥ 386b97b43c0c9e0d878eec7ea1db16af22b036ae, < 0fe70c15f9435bb3c50954778245d62ee38b0e03 | ≥ 386b97b43c0c9e0d878eec7ea1db16af22b036ae, < a4a54c54af2516caa9c145015844543cfc84316a | ≥ 386b97b43c0c9e0d878eec7ea1db16af22b036ae, < 8511293e643a18b248510ae5734e4f360754348c | ≥ 386b97b43c0c9e0d878eec7ea1db16af22b036ae, < b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe | 4.10
- linux_kernel< 4.14.241 | ≥ 4.15, < 4.19.199 | ≥ 4.20, < 5.4.135 | ≥ 5.5, < 5.10.53 | ≥ 5.11, < 5.13.5
Debian1 product
- linux< 5.14.6-1
3 vendors · 91 products
